403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/coaching_sites/usbusinessfundingsolutions.com/member/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/coaching_sites/usbusinessfundingsolutions.com/member/my_account.php
<?php
header("Location: /member/service-agreements.php");
exit(0);
require_once($_SERVER['DOCUMENT_ROOT'].'/inc/php_header.php'); 
$title = 'My Account'; 
$body_id = 'memb';
require_once('header.php');

if(!empty($_POST)) {
	$data = array(
		'first' => $db->clean($_POST['first']),
		'last' => $db->clean($_POST['last']),
		'address1' => $db->clean($_POST['address1']),
		'city' => $db->clean($_POST['city']),
		'state' => $db->clean($_POST['state']),
		'zip' => $db->clean($_POST['zip']),
		'country' => $db->clean($_POST['country']),
		'phone_1' => $db->clean($_POST['phn1']).$db->clean($_POST['phn2']).$db->clean($_POST['phn3']),
		'phone_2' => $db->clean($_POST['wrk1']).$db->clean($_POST['wrk2']).$db->clean($_POST['wrk3']),
		'phone_3' => $db->clean($_POST['cel1']).$db->clean($_POST['cel2']).$db->clean($_POST['cel3']),
		'fax' => $db->clean($_POST['fax1']).$db->clean($_POST['fax2']).$db->clean($_POST['fax3']),
		'email' => $db->clean($_POST['email']),
	);
	if(isset($_POST['password'])) {
		$data['password'] = $db->clean($_POST['password']);
	}
	
	$errors = array();
	if(!preg_match('/^[a-zA-Z]+$/',$data['first'])) {
		$errors[] = "First name must contain only letters.";
	}
	if(!preg_match('/^[a-zA-Z]+$/',$data['last'])) {
		$errors[] = "Last name must contain only letters.";
	}
	if(!preg_match('/^[\w. ]+$/',$data['address1'])) {
		$errors[] = "Address must contain only letters, numbers, spaces, and periods.";
	}
	if(!preg_match('/^[a-zA-Z. ]+$/',$data['city'])) {
		$errors[] = "City must contain only letters, spaces and periods.";
	}
	if(!preg_match('/^[a-zA-Z]{2}$/',$data['state'])) {
		$errors[] = "State must be 2 letters.";
	}
	if(!preg_match('/^[\d]{5}$/',$data['zip'])) {
		$errors[] = "Zip must be 5 numbers.";
	}
	if(!empty($data['country']) && !preg_match('/^[a-zA-Z]{2,3}$/',$data['country'])) {
		$errors[] = "Country must be 2-3 letters.";
	}
	if(!preg_match('/^[\d]{10}$/',$data['phone_1'])) {
		$errors[] = "Home Phone must be 10 numbers.";
	}
	if(!empty($data['phone_2']) && !preg_match('/^[\d]{10}$/',$data['phone_2'])) {
		$errors[] = "Work Phone must be 10 numbers.";
	}
	if(!empty($data['phone_3']) && !preg_match('/^[\d]{10}$/',$data['phone_3'])) {
		$errors[] = "Cell Phone must be 10 numbers.";
	}
	if(!empty($data['fax']) && !preg_match('/^[\d]{10}$/',$data['fax'])) {
		$errors[] = "Fax must be 10 numbers.";
	}
	if(!validEmail($data['email'])) {
		$errors[] = "Email is not valid.";
	}
	
	//check to make sure email isn't being used
	$email = $db->get_results("
		SELECT id,email
		FROM lc_reseller
		WHERE id <> '".$db->clean($_SESSION['Client']['id'])."' AND ( email = '".$data['email']."' OR user = '".$data['email']."' )
	");
	if(count($email) > 0) {
		$errors[] = "That email is already being used. Please enter another email address.";
	}
	//if there are no errors, update the client info.
	if(count($errors)==0) {
		//update the client's info
		$fields = "";
		foreach($data as $key=>$value) {
			if($key=='password') {
				$fields .= ",".$key."=PASSWORD('".$value."')";
			} else {
				$fields .= ",".$key."='".$value."'";
			}
		}
		$fields = substr($fields,1);
		$result = $db->get_results("
			UPDATE lc_reseller
			SET ".$fields."
			WHERE id='".$db->clean($_SESSION['Client']['id'])."'
		");
		//update password in session if they changed it.
		if(isset($data['password'])) {
			$pass = $db->get_results("
				SELECT password
				FROM lc_reseller
				WHERE id='".$_SESSION['Client']['id']."'
			");
			if(!empty($pass)) {
				$_SESSION['Client']['password'] = $pass[0]->password;
			}
		}
	}
}

//get client info
$clients = $db->get_results("
		SELECT id, first, last, address1, city, state, zip, country, phone_1, phone_2, phone_3, fax, email 
		FROM lc_reseller 
		WHERE id = '".$db->clean($_SESSION['Client']['id'])."' LIMIT 1
		");
$client = $clients[0];

$documents = $db->get_results("
		SELECT id,title,datesigned,void
		FROM document
		WHERE client_id = '".$db->clean($_SESSION['Client']['id'])."'
		AND title <> 'Profile' 
		ORDER BY id DESC
		");
$profiles = $db->get_results("
		SELECT id,date_entered
		FROM client_profile
		WHERE client_id = '".$db->clean($_SESSION['Client']['id'])."'
		ORDER BY id DESC
		");

$signed_docs = array();
$unsigned_docs = array();
$signed_prof = array();
$unsigned_prof = array();
if(empty($documents)) {
	$documents = array();
}
if(empty($profiles)) {
	$profiles = array();
}
foreach($documents as $document) {
	if($document->datesigned == "2000-01-01 00:00:00") {
		$unsigned_docs[] = $document;
	} else {
		$signed_docs[] = $document;
	}
}
foreach($profiles as $profile) {
	if($profile->date_entered=="0000-00-00 00:00:00") {
		$unsigned_prof[] = $profile;
	} else {
		$signed_prof[] = $profile;
	}
}
if(!empty($unsigned_docs)) {
	$unsigned_error = 'Please complete any unsigned documents.';
}
$NUM_NEWS = 1;
?>
				<script type="text/javascript">
					$('document').ready(function() {
						$('#edit_member_info_form').submit(function() {
							var valid = true;
							var errors = [];
							var first = $('input[name="first"]').val();
							var last = $('input[name="last"]').val();
							var address1 = $('input[name="address1"]').val();
							var city = $('input[name="city"]').val();
							var state = $('input[name="state"]').val().toUpperCase();
							var zip = $('input[name="zip"]').val();
							var country = $('input[name="country"]').val().toUpperCase();
							var phone = $('input[name="phn1"]').val() + "" + $('input[name="phn2"]').val() + "" + $('input[name="phn3"]').val();
							var work = $('input[name="wrk1"]').val() + "" + $('input[name="wrk2"]').val() + "" + $('input[name="wrk3"]').val();
							var cell = $('input[name="cel1"]').val() + "" + $('input[name="cel2"]').val() + "" + $('input[name="cel3"]').val();
							var fax = $('input[name="fax1"]').val() + "" + $('input[name="fax2"]').val() + "" + $('input[name="fax3"]').val();
							var email = $('input[name="email"]').val();

							var alpha = /^[a-zA-Z]+$/;
							var numeric = /^[\d]+$/;
							var alphanumeric = /^[\w]+$/;
							var alphaspaceperiod = /^[a-zA-Z .]+$/;
							var addr = /^[\w .]+$/;

							if(first.length == 0 || !alpha.test(first)) {
								valid = false;
								errors.push('First Name must only contain letters.');
							}
							if(last.length == 0 || !alpha.test(last)) {
								valid = false;
								errors.push('Last Name must only contain letters.');
							}
							if(address1.length == 0 || !addr.test(address1)) {
								valid = false;
								errors.push('Address must only contain letters, numbers, spaces and periods.');
							}
							if(city.length == 0 || !alphaspaceperiod.test(city)) {
								valid = false;
								errors.push('City must only contain letters, spaces and periods.');
							}
							if(state.length !=2 || !alpha.test(state)) {
								valid = false;
								errors.push('State must be two letters.');
							}
							if(zip.length !=5 || !numeric.test(zip)) {
								valid = false;
								errors.push('Zip must be 5 numbers.');
							}
							if(country.length>0 && (country.length > 3 || !alpha.test(country))) {
								valid = false;
								errors.push('Country must be 2-3 letters.');
							}
							if(phone.length != 10 || !numeric.test(phone)) {
								valid = false;
								errors.push('Home Phone must be 10 numbers.');
							}
							if(work.length>0 && (work.length != 10 || !numeric.test(work))) {
								valid = false;
								errors.push('Work Phone must be 10 numbers.');
							}
							if(cell.length>0 && (cell.length != 10 || !numeric.test(cell))) {
								valid = false;
								errors.push('Cell Phone must be 10 numbers.');
							}
							if(fax.length>0 && (fax.length != 10 || !numeric.test(fax))) {
								valid = false;
								errors.push('Fax Number must be 10 numbers.');
							}
							var dot = email.lastIndexOf('.');
							var at = email.lastIndexOf('@');
							if(at == -1 || dot <= at) {
								valid = false;
								errors.push('Email is not valid.');
							}
							if($('#pwrd2').is(':visible')) {
								var pass1 = $('input[name="password"]').val();
								var pass2 = $('input[name="password2"]').val();
								if(pass1.length < 6) {
									valid = false;
									errors.push('Password must be at least 6 characters.');
								}
								if(pass1 != pass2) {
									valid = false;
									errors.push('Passwords do not match.');
								}
							}
							if(errors.length>0) {
								var errorhtml = "";
								for(var i in errors) {
									errorhtml += errors[i] + "<br />";
								}
								$('#errors').show().html(errorhtml);
							}							
							return valid;
						});
						$('#edit_member_info').click(function() {
							if($('#edit_member_info_form').is(':hidden')) {
								$('#acc_text').hide();
								$('#edit_member_info_form').show().find('input').filter(':visible').removeAttr('disabled');
								$(this).text('cancel');
							} else {
								$('#edit_member_info_form').hide().find('input').attr('disabled','disabled');
								$('#acc_text').show();
								$('#errors').hide();
								$(this).text('edit');
							}
						});
						$('#change_password').click(function() {
							if($('#pwrd2').is(':hidden')) {
								$('#pwrd2').show().find('input').removeAttr('disabled');
								$(this).text('Don\'t reset password');
							} else {
								$('#pwrd2').hide().find('input').attr('disabled','disabled');
								$(this).text('Click here to Reset Password');
							}
						});
						//name window so we can update it when the contract is signed
						window.name = "cid<?= $_SESSION['Client']['id'];?>";
						$(':hidden').find('input').attr('disabled','disabled');
					});
				</script>
            <div id="content" class="size">
            	<table cellspacing="0" cellpadding="0" border="0" style="width:100%;">
                	<tr>
                    	<td width="680" class="borderBot" style="height:600px">
                        	<h1>My Account Page</h1>
                            <p>Your account information is listed below. If anything is incorrect, please update the forms by clicking on the "<span class="edit_"><a href="#edit_member_info">edit profile</a></span>" links below to reflect your correct information.</p>
                            <div style="clear:both"></div>
                            <?= (isset($unsigned_error)) ? '<p style="color: red">'.$unsigned_error.'</p>' : null;?>
                            <h2 style="float:left">Member Information</h2>
                            <span id="edit_member_info" class="pwrd1" style="float:left;margin: 3px 10px;">edit</span>
                            <div id="errors" style="border:1px solid red; padding:2px; color:red; <?php if(empty($errors)) { echo "display:none;"; }?>"><?php if(!empty($errors)) { foreach($errors as $error) { echo $error.'<br />'; } }?></div>
                            <form name="edit_member_info" id="edit_member_info_form" action="<?= $_SERVER['SCRIPT_NAME']; ?>" method="post" style="display:none; margin-left:15px">
                                <table id="acc_forms" cellpadding="2">
                                    <tr>
                                        <td>First Name:</td>
                                        <td><input class="tx2" type="text" name="first" value="<?= stripslashes($client->first);?>" /></td>
                                        <td>Last Name:</td>
                                        <td><input class="tx2" type="text" name="last" value="<?= stripslashes($client->last);?>" /></td>
                                    </tr>
                                    <tr>
                                        <td>Address:</td>
                                        <td colspan="3"><input class="tx2" type="text" name="address1" size="50" value="<?= $client->address1;?>" /></td>
                                    </tr>
                                    <tr>
                                        <td nowrap="nowrap">City, State, Zip:</td>
                                        <td nowrap="nowrap" colspan="3"><input class="tci" type="text" name="city" value="<?= $client->city;?>" /> <input class="tst" type="text" name="state" value="<?= $client->state;?>" /> <input class="ph2" type="text" name="zip" value="<?= $client->zip;?>" /></td>
                                    </tr>
                                    <tr>
                                        <td>Country:</td>
                                        <td><input class="tx1" class="text" type="text" name="country" value="<?= $client->country;?>" /></td>
                                    </tr>
                                    <tr>
                                        <td>Email:</td>
                                        <td colspan="4"><input class="tx2" type="text" name="email" size="50" value="<?= $client->email;?>" /></td>
                                    </tr>
                                    <tr>
                                        <td>Home Phone:</td>
                                        <td nowrap="nowrap"><input class="ph1" type="text" name="phn1" value="<?= substr($client->phone_1,0,3);?>" maxlength="3" /> <input class="ph1" type="text" name="phn2" value="<?= substr($client->phone_1,3,3);?>" maxlength="3" /> <input class="ph2" type="text" name="phn3" value="<?= substr($client->phone_1,6);?>" maxlength="4" /> </td>
                                        <td style="padding-left:10px">Work #:</td>
                                        <td nowrap="nowrap"><input class="ph1" type="text" name="wrk1" value="<?= substr($client->phone_2,0,3);?>" maxlength="3" /> <input class="ph1" type="text" name="wrk2" value="<?= substr($client->phone_2,3,3);?>" maxlength="3" /> <input class="ph2" type="text" name="wrk3" value="<?= substr($client->phone_2,6);?>" maxlength="4" /> </td>
                                    </tr>
                                    <tr>
                                        <td>Cell #:</td>
                                        <td nowrap="nowrap"><input class="ph1" type="text" name="cel1" value="<?= substr($client->phone_3,0,3);?>" maxlength="3" /> <input class="ph1" type="text" name="cel2" value="<?= substr($client->phone_3,3,3);?>" maxlength="3" /> <input class="ph2" type="text" name="cel3" value="<?= substr($client->phone_3,6);?>" /> </td>
                                        <td style="padding-left:10px">Fax #:</td>
                                        <td nowrap="nowrap"><input class="ph1" type="text" name="fax1" value="<?= substr($client->fax,0,3);?>" maxlength="3" /> <input class="ph1" type="text" name="fax2" value="<?= substr($client->fax,3,3);?>" maxlength="3" /> <input class="ph2" type="text" name="fax3" value="<?= substr($client->fax,6);?>" maxlength="4" /> </td>
                                    </tr>
                                    <tr>
                                        <td colspan="4" class="pwrd">
                                            <span id="change_password" class="pwrd1">Click here to Reset Password</span>
                                            <table id="pwrd2" width="100%" style="display:none">
                                                <tr>
                                                   <td>Password:</td>
                                                    <td><input class="tx1" type="password" name="password" value="" /></td>
                                                    <td nowrap="nowrap" colspan="2" style="font:italic 9px/240% verdana">*Please type at least 6 characters</td>
                                                </tr> 
                                                <tr>
                                                    <td>Retype Password:</td>
                                                    <td><input class="tx1" type="password" name="password2" value="" /></td>
                                                    <td nowrap="nowrap" colspan="2" style="font:italic 9px/240% verdana">*Please type at least 6 characters</td>
                                                </tr> 
                                            </table>
                                        </td>
                                    </tr>
                                    <tr>
                                        <td colspan="4" align="center"><input class="submit btnBlue" type="submit" name="submit" value="Submit" /></td>
                                    </tr>
                                </table>
                            </form>
                           
                            <table id="acc_text" cellpadding="2" style="margin-left:50px">
                                <tr>
                                    <td>Full Name:</td>
                                    <td><?= stripslashes($client->first.' '.$client->last)?></td>
                                </tr>
                                <tr>
                                    <td>Address:</td>
                                    <td><?= $client->address1; ?></td>
                                </tr>
                                <tr>
                                    <td>City, State, Zip:</td>
                                    <td><?= $client->city.', '.$client->state.' '.$client->zip;?></td>
                                </tr>
                                <tr>
                                    <td>Home Phone:</td>
                                    <td><?= (!empty($client->phone_1)) ? formatPhone($client->phone_1) : null;?></td>
                                </tr>
                                <tr>
                                    <td>Work Phone:</td>
                                    <td><?= (!empty($client->phone_2)) ? formatPhone($client->phone_2) : null;?></td>
                                </tr>
                                <tr>
                                    <td>Cell Phone:</td>
                                    <td><?= (!empty($client->phone_3)) ? formatPhone($client->phone_3) : null;?></td>
                                </tr>
                                <tr>
                                    <td>Fax:</td>
                                    <td><?= (!empty($client->fax)) ? formatPhone($client->fax) : null;?></td>
                                </tr>
                                <tr>
                                    <td>Email:</td>
                                    <td><?= $client->email;?></td>
                                </tr>
                            </table>
                        </td>
						<?php /*
                        <td width="275" rowspan="2" class="columnData">
                        	<? include($_SERVER['DOCUMENT_ROOT'].'/sidebar_news.php'); ?>
                        	<? include($_SERVER['DOCUMENT_ROOT'].'/sidebar_quotes.php'); ?>
                        </td> */ ?>
                    </tr>
                    <tr>
                    	<td width="680" class="borderRight">
                            <div id="docs">
                                <div id="unsigned_docs">
                                <h2>Unsigned Documents</h2>
                                <?php                               	
                                foreach($unsigned_docs as $document) {
                                    ?>
                                    <div class="start<?= ($document->void==0) ? null : " void";?>" style="padding:0px;"><a style="display:block;padding:12px;" href="view-contract.php?id=<?= $document->id; ?>" target="_blank"><?= $document->title; ?></a></div>
                                    <?php
                                }
                                foreach($unsigned_prof as $profile) {
                                    echo '<a style="display:block;" href="view-profile.php?id='.$profile->id.'" class="start" target="_blank"><span>Profile</span></a></div>';
                                }
                                ?>
                                </div>
                                <div id="signed_docs">
                                <h2>Signed Documents</h2>
                                <?php
                                foreach($signed_docs as $document) {
                                    ?>
                                    <div class="signed<?= ($document->void==0) ? null : " void";?>" style="padding:0px;"><a style="display:block;padding:12px;" href="view-contract.php?id=<?= $document->id; ?>" target="_blank"><?= $document->title; ?></a></div>
                                    <?php
                                }
                                foreach($signed_prof as $profile) {
                                    echo '<a style="display:block;" href="view-profile.php?id='.$profile->id.'" class="signed" target="_blank"><span>Profile</span></a>';
                                }
                                ?>
                                </div>
                                <div style="clear:both"></div>
                            </div>
                        </td>
                    </tr>
                </table>
            </div>

<?php require_once($_SERVER['DOCUMENT_ROOT'].'/member/footer.php'); ?>

Youez - 2016 - github.com/yon3zu
LinuXploit